server load gets high in a second

M

mehrdadabed

Verified User
Joined
Nov 10, 2009
Messages
15
Hi,

every things seems fine, but the server load gets high suddenly, here is the processes before load gets high :

Code: 
top - 12:07:21 up 1 day, 10:33,  3 users,  load average: 3.88, 4.84, 4.98
Tasks: 536 total,   1 running, 517 sleeping,   1 stopped,  17 zombie
Cpu(s): 26.3%us,  8.3%sy,  0.0%ni, 40.8%id, 23.7%wa,  0.2%hi,  0.7%si,  0.0%st
Mem:  12291076k total, 12020088k used,   270988k free,   523372k buffers
Swap:  4200888k total,     4720k used,  4196168k free,  9910228k cached

  PID  PPID USER     nFLT    TIME+  %CPU %MEM  PR  NI S  VIRT SWAP  RES  UID COMMAND                                                       
20876 31282 apache      0   0:00.44  0.0  0.5  15   0 D  126m  65m  61m  100 /usr/sbin/httpd -k start -DSSL                                
20246 23071 root        0   0:11.43  1.0  0.0  15   0 R 13144  11m 1492    0 top -ibd2                                                     
17719 31282 apache      0   0:00.38  0.0  0.5  15   0 D  126m  65m  61m  100 /usr/sbin/httpd -k start -DSSL                                
 6820   139 root        0   0:10.51  0.5  0.0  15   0 D     0    0    0    0 [pdflush]                                                     
 6779  8334 hasa5454    0   0:00.09  4.5  0.2  17   0 D  146m 128m  18m  724 /usr/local/php5/bin/php-cgi


and the processes 2 seconds later :

Code: 
top - 12:07:24 up 1 day, 10:34,  3 users,  load average: 16.94, 9.46, 6.18
Tasks: 572 total,   7 running, 548 sleeping,   1 stopped,  16 zombie
Cpu(s): 32.9%us, 11.1%sy,  0.0%ni, 39.6%id, 15.5%wa,  0.2%hi,  0.7%si,  0.0%st
Mem:  12291076k total, 12175708k used,   115368k free,   521112k buffers
Swap:  4200888k total,     4720k used,  4196168k free,  9814972k cached

  PID  PPID USER     nFLT    TIME+  %CPU %MEM  PR  NI S  VIRT SWAP  RES  UID COMMAND                                                       
25260 31282 apache      0   0:00.38  0.5  0.5  15   0 D  127m  65m  61m  100 /usr/sbin/httpd -k start -DSSL                                
24371 31282 apache      0   0:00.37  0.0  0.5  15   0 D  126m  65m  61m  100 /usr/sbin/httpd -k start -DSSL                                
21591 31282 apache      0   0:00.79  0.0  0.5  15   0 D  127m  65m  61m  100 /usr/sbin/httpd -k start -DSSL                                
21038 31282 apache      0   0:00.27  0.0  0.5  15   0 D  126m  65m  61m  100 /usr/sbin/httpd -k start -DSSL                                
20924 31282 apache      0   0:00.42  0.0  0.5  15   0 D  126m  65m  61m  100 /usr/sbin/httpd -k start -DSSL                                
20876 31282 apache      0   0:00.44  0.0  0.5  16   0 D  126m  65m  61m  100 /usr/sbin/httpd -k start -DSSL                                
20870 31282 apache      0   0:00.35  0.0  0.5  15   0 D  126m  65m  61m  100 /usr/sbin/httpd -k start -DSSL                                
20499 31282 apache      1   0:00.34  0.0  0.5  15   0 D  126m  65m  61m  100 /usr/sbin/httpd -k start -DSSL                                
20496 31282 apache      0   0:00.09  0.0  0.5  16   0 D  126m  65m  61m  100 /usr/sbin/httpd -k start -DSSL                                
20487 31282 apache      0   0:00.11  0.0  0.5  15   0 D  126m  65m  60m  100 /usr/sbin/httpd -k start -DSSL                                
20246 23071 root        0   0:11.44  0.5  0.0  16   0 R 13144  11m 1492    0 top -ibd2                                                     
18867 31282 apache      0   0:00.08  0.0  0.5  15   0 D  126m  65m  61m  100 /usr/sbin/httpd -k start -DSSL                                
12055 31282 apache      0   0:00.04  0.0  0.5  15   0 D  126m  65m  60m  100 /usr/sbin/httpd -k start -DSSL                                
 8355 31282 apache      1   0:00.39  0.0  0.5  16   0 D  126m  65m  61m  100 /usr/sbin/httpd -k start -DSSL                                
 6869 32277 root        0   0:00.00  0.0  0.0  17   0 D   480  336  144    0 /usr/local/suphp/sbin/suphp                                   
 6868  6865 root        0   0:00.00  0.0  0.0  25   0 D   444  332  112    0 /usr/local/suphp/sbin/suphp                                   
 6867  6864 apache      0   0:00.00  0.0  0.5  25   0 D  126m  67m  59m  100 /usr/sbin/httpd -k start -DSSL                                
 6866 31282 apache      0   0:00.00  0.0  0.5  25   0 D  126m  66m  59m  100 /usr/sbin/httpd -k start -DSSL                                
 6863 31282 apache      0   0:00.00  0.0  0.5  25   0 D  126m  66m  59m  100 /usr/sbin/httpd -k start -DSSL                                
 6861 31282 apache      0   0:00.00  0.0  0.5  24   0 D  126m  65m  60m  100 /usr/sbin/httpd -k start -DSSL                                
 6859 31282 apache      0   0:00.00  0.0  0.5  24   0 D  126m  65m  60m  100 /usr/sbin/httpd -k start -DSSL                                
 6858 31282 apache      0   0:00.00  0.0  0.5  24   0 D  126m  66m  60m  100 /usr/sbin/httpd -k start -DSSL                                
 6857  6854 apache      0   0:00.00  0.0  0.5  24   0 D  126m  67m  59m  100 /usr/sbin/httpd -k start -DSSL                                
 6856 31282 apache      0   0:00.00  0.0  0.5  25   0 D  126m  66m  60m  100 /usr/sbin/httpd -k start -DSSL                                
 6855 31282 apache      0   0:00.00  0.0  0.5  24   0 D  126m  66m  59m  100 /usr/sbin/httpd -k start -DSSL                                
 6853 31282 apache      0   0:00.00  0.0  0.5  19   0 D  126m  65m  60m  100 /usr/sbin/httpd -k start -DSSL                                
 6852 31282 apache      0   0:00.00  0.0  0.5  19   0 D  126m  66m  59m  100 /usr/sbin/httpd -k start -DSSL                                
 6851 31282 apache      0   0:00.00  0.0  0.5  19   0 D  126m  66m  59m  100 /usr/sbin/httpd -k start -DSSL                                
 6850 31282 root        0   0:00.00  0.0  0.5  18   0 D  125m  66m  59m    0 /usr/sbin/httpd -k start -DSSL                                
 6849 29234 apache      0   0:00.00  0.0  0.5  15   0 D  126m  66m  59m  100 /usr/sbin/httpd -k start -DSSL                                
 6847 30090 takstyty    0   0:00.03  1.5  0.1  17   0 R 90240  75m  12m  861 /usr/local/php5/bin/php-cgi                                   
 6846  4975 takstyty    0   0:00.01  0.5  0.1  17   0 R 87224  76m 9060  861 /usr/local/php5/bin/php-cgi                                   
 6845  3399 takstyty    0   0:00.03  1.5  0.1  18   0 D 89876  75m  12m  861 /usr/local/php5/bin/php-cgi                                   
 6844 26131 markrtrt    0   0:00.01  0.5  0.1  17   0 D 87224  76m 9056  782 /usr/local/php5/bin/php-cgi                                   
 6843 26418 skymrrrr    0   0:00.01  0.5  0.1  15   0 D 87224  76m 9068 1096 /usr/local/php5/bin/php-cgi                                   
 6842 26358 shiatttt    0   0:00.01  0.5  0.1  15   0 D 87224  76m 9060  795 /usr/local/php5/bin/php-cgi                                   
 6841  8207 barserer    0   0:00.01  0.5  0.1  17   0 D 87224  76m 9076 1046 /usr/local/php5/bin/php-cgi                                   
 6840 32201 net4grgr    0   0:00.03  1.5  0.1  17   0 R 91472  75m  13m  525 /usr/local/php5/bin/php-cgi                                   
 6835  8212 takstyty    0   0:00.13  6.5  0.1  16   0 D  143m 128m  14m  861 /usr/local/php5/bin/php-cgi                                   
 6832  8036 net4grgr    0   0:00.10  5.0  0.2  17   0 R 99.8m  75m  24m  525 /usr/local/php5/bin/php-cgi                                   
 6823 26415 takstyty    0   0:00.12  6.0  0.1  16   0 R  145m 129m  16m  861 /usr/local/php5/bin/php-cgi                                   
 6821  6816 takstyty    0   0:00.13  6.5  0.1  17   0 D  143m 128m  14m  861 /usr/local/php5/bin/php-cgi                                   
 6818 31282 apache      0   0:00.00  0.0  0.5  19   0 D  126m  66m  60m  100 /usr/sbin/httpd -k start -DSSL                                
 6811 31282 apache      0   0:00.98  0.0  0.5  15   0 D  126m  65m  61m  100 /usr/sbin/httpd -k start -DSSL                                
 6810 31282 apache      0   0:00.00  0.0  0.5  17   0 D  126m  65m  60m  100 /usr/sbin/httpd -k start -DSSL                                
 6779  8334 hasa5454    0   0:00.09  0.0  0.2  17   0 D  146m 128m  18m  724 /usr/local/php5/bin/php-cgi                                   
 6772 31282 apache      0   0:00.00  0.0  0.5  15   0 D  126m  65m  60m  100 /usr/sbin/httpd -k start -DSSL                                
 6771 31282 apache      0   0:00.00  0.0  0.5  15   0 D  126m  65m  60m  100 /usr/sbin/httpd -k start -DSSL                                
 6720 31282 apache      0   0:00.00  0.0  0.5  15   0 D  126m  65m  60m  100 /usr/sbin/httpd -k start -DSSL                                
 6549 31282 apache      1   0:01.12  0.0  0.5  15   0 D  126m  65m  61m  100 /usr/sbin/httpd -k start -DSSL                                
 5998 31282 apache      0   0:00.02  0.0  0.5  15   0 D  126m  65m  60m  100 /usr/sbin/httpd -k start -DSSL                                
 5942 31282 apache      0   0:00.03  0.5  0.5  15   0 D  126m  65m  60m  100 /usr/sbin/httpd -k start -DSSL                                
 5896 31282 apache      0   0:00.03  0.0  0.5  15   0 D  126m  65m  60m  100 /usr/sbin/httpd -k start -DSSL                                
 5056 31282 apache      0   0:00.03  0.0  0.5  15   0 D  126m  65m  60m  100 /usr/sbin/httpd -k start -DSSL                                
 5054 31282 apache      0   0:00.05  0.0  0.5  15   0 D  126m  65m  61m  100 /usr/sbin/httpd -k start -DSSL                                
 4597 31282 apache      0   0:00.05  0.5  0.5  15   0 D  126m  65m  60m  100 /usr/sbin/httpd -k start -DSSL                                
 4520 31282 apache      0   0:00.05  0.5  0.5  15   0 D  126m  65m  60m  100 /usr/sbin/httpd -k start -DSSL                                
 4519 31282 apache      0   0:00.00  0.0  0.5  15   0 D  126m  65m  60m  100 /usr/sbin/httpd -k start -DSSL                                
 4137 31282 apache      0   0:00.74  0.0  0.5  15   0 D  126m  65m  61m  100 /usr/sbin/httpd -k start -DSSL                                
 3337 31282 apache      0   0:00.12  0.0  0.5  15   0 D  126m  65m  60m  100 /usr/sbin/httpd -k start -DSSL                                
 3276 31282 apache      0   0:00.05  0.0  0.5  15   0 D  126m  65m  60m  100 /usr/sbin/httpd -k start -DSSL                                
 3242 31282 apache      0   0:00.05  0.0  0.5  15   0 D  126m  65m  60m  100 /usr/sbin/httpd -k start -DSSL                                
 1074 31282 apache      0   0:00.46  0.0  0.5  15   0 D  127m  65m  61m  100 /usr/sbin/httpd -k start -DSSL                                
   33     1 root        0   0:00.04  0.0  0.0  10  -5 R     0    0    0    0 [events/7]

any ideas ?
 
Hi,

From my point of view, this data is insufficient to explain the cause of server load. You need to check the processes running in the system. The issue might be due to the large httpd connections to the server.

There are possibilities for malicious scripts or spamming inside the server.

You can check the httpd connections using the 'netstat' command. If the connections are very high, you can install the apache module 'mod_evasive' for limiting the number of connections and the number ofconnections from a particular IP.

Also you can add further restrictions via installing firewall like CSF or APF.

Please update this thread if you need further assistance.

Regards,
Ajo
 
You must log in or register to reply here.
Back
Top